19 matches found
EUVD-2017-5987
Malware in sbrugna...
EUVD-2004-1114
Malware in sbrugna...
Prime95 Version 29.8 build 6 - Buffer Overflow (SEH)
Exploit Title: Prime95 Version 29.8 build 6 - Buffer Overflow SEH Date: 2019-12-22 Vendor Homepage: https://www.mersenne.org Software Link: http://www.mersenne.org/ftproot/gimps/p95v298b6.win32.zip Exploit Author: Achilles Tested Version: 29.8 build 6 Tested on: Windows 7 x64 1.- Run python...
Gentoo sci-mathematics/gimps package elevation of privilege vulnerability
The Gentoo sci-mathematics/gimps package is a Mersenne prime search package from the Gentoo Foundation. An elevation of privilege vulnerability exists in versions of the Gentoo sci-mathematics/gimps package prior to 28.10-r1. A local attacker can exploit this vulnerability to gain privileges by...
GLSA-201709-11 : GIMPS: Root privilege escalation
The remote host is affected by the vulnerability described in GLSA-201709-11 GIMPS: Root privilege escalation It was discovered that Gentoos default GIMPS installation suffered from a privilege escalation vulnerability in the init script. This script calls an unsafe chown -R command in checkconfi...
GIMPS: Root privilege escalation
Background GIMPS, the Great Internet Mersenne Prime Search, is a software capable of find Mersenne Primes, which are used in cryptography. GIMPS is also used for hardware testing. Description It was discovered that Gentoo’s default GIMPS installation suffered from a privilege escalation...
CVE-2017-14484
The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search GIMPS allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed...
CVE-2017-14484
The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search GIMPS allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed...
Hardcoded credentials
The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search GIMPS allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed...
CVE-2017-14484
Summary: CVE-2017-14484 affects Gentoo’s sci-mathematics/gimps prior to 28.10-r1, enabling a local user to escalate privileges by creating a hard link under /var/lib/gimps due to an unsafe chown -R in the init/checkconfig path. The vulnerability is documented in multiple sources (NVD description ...
CVE-2017-14484
The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search GIMPS allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed...
Gentoo Security Advisory GLSA 200411-26 (GIMPS,SETI@home,ChessBrain)
The remote host is missing updates announced in advisory GLSA 200411-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200411-26 (GIMPS, SETI@home, ChessBrain)
The remote host is missing updates announced in advisory GLSA 200411-26. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2004-1116
The init scripts in Great Internet Mersenne Prime Search GIMPS 23.9 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs...
CVE-2004-1116
The init scripts in Great Internet Mersenne Prime Search GIMPS 23.9 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs...
CVE-2004-1116
CVE-2004-1116 affects Great Internet Mersenne Prime Search (GIMPS) 23.9 and earlier, where init scripts run user-owned binaries with root privileges. This enables local privilege escalation if a user can modify the programs, as described in NVD, CVE listings, and Gentoo GLSA 200411-26. The OpenVA...
[ GLSA 200411-26 ] GIMPS, SETI@home, ChessBrain: Insecure installation
Gentoo Linux Security Advisory GLSA 200411-26 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
GLSA-200411-26 : GIMPS, SETI@home, ChessBrain: Insecure installation
The remote host is affected by the vulnerability described in GLSA-200411-26 GIMPS, SETI@home, ChessBrain: Insecure installation GIMPS, SETI@home and ChessBrain ebuilds install user-owned binaries and init scripts which are executed with root privileges. Impact : This could lead to a local...
GIMPS, SETI@home, ChessBrain weak permissions
Unprivileged user's file are executed with superuser privileges...